10/511610 

DT15 Rec'd PCT/PTO 0 4 NOV 2004 



System and Method for Management of Resources of Portable Resource 

Modules 

Technical Field 

The present invention relates to a system, a metfiod and a 
5 management centre for managing resources of portable resource modules. 
The system relates in particular to a system, a method and a management 
centre for managing resources of a multiplicity of portable resource modules, 
each being connected to a communication terminal and each comprising a 
resource control mechanism for making ready and releasing resources in the 
10 respective resource module, the resources comprising electronic memory units, 
and which portable resource modules are designed in particular as chipcards. 

Background Art 

Portable resource modules comprising electronic data stores and 
program stores as well as one or more processors are known and are designed 

15 conventionally with interfaces for removable connection to a host device. Via 
this removable connection, a portable resource module and a host device can 
be hooked up for temporary interaction and co-operation. The host device can 
access data stores in the portable resource module, for example, or co-operate 
with a software application, which is executed on a processor of the portable 

20 resource module. The known portable resource modules are typically designed 
in the form of so-called chipcards, but they can also be designed differently, for 
instance as so-called electronic tokens. Among the most well known chipcards 
are the SIM cards (Subscriber Identity Module), which is removably connectible 
to a mobile radio telephone as an identification and authentication module, and 

25 the bancomat card which is removably connectible to bancomats or so-called 
ATMs (Automatic Teller Machines). Along with the progress in miniaturisation 
of electronic components, the memory capacity and the processor capacity of 
portable resource modules have been continuously enlarged, so that it has 
become realistic to use the resource modules not merely for a dedicated 

30 application but for a plurality of applications. In particular, in connection with 
communication terminals, with networked host devices and with suitable writing 
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devices, it has become possible moreover for authorised parties to transmit 
additional software applications dynamically onto the portable resource 
modules, store them there, and execute them on the local processor. 
Increased security problems have thereby arisen, however, since the possibility 
5 has existed that additionally loaded software applications could access data of 
other software applications in the portable resource module in an unauthorised 
way. 

Described in the patent application EP 0 908 855 is a resource 
control mechanism for chipcards having a plurality of software applications, 

10 which mechanism makes available resources for the software applications in 
the chipcard and prevents data of other software applications in the card from 
being accessed in an unauthorised way. If the chipcard is connected to a host 
device, the resource control mechanism according to EP 0 908 855 makes it 
possible to receive requests from the host device for the execution of the 

15 software applications, to provide, by means of a memory area table stored In 
the chipcard, a memory area for the storage and for the execution (inclusive 
data storage) of a respective software application as resources and to check 
that the respective software application is executed In the resources made 
ready therefor. The resource control mechanism according to EP 0 908 855, 

20 however, cannot prevent redundant, i.e. already available, software applications 
from being loaded onto the chipcard or unnecessary loading attempts from 
being made for additional software applications when no resources therefor are 
available on the chipcard. This is a drawback in particular if software 
applications are supposed to be loaded onto a multiplicity of resource modules 

25 via a communication network since network and storage capacity are thereby 
wasted unnecessarily. 

Disclosure of Invention 

It is an object of the present invention to propose a new system, a 
method and a management centre for management of resources of portable 
30 resource modules, which do not have the drawbacks of the prior art and which 
make possible in particular the management of resources of a multiplicity of 
portable resource modules. 
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These objects are achieved according to the present invention in 
particular through the elements of the independent claims. Further 
advantageous embodiments follow moreover from the dependent claims and 
from the description. 

5 The portable resource modules, designed in particular as chipcards, 

are each connected to a communication terminal and each comprise a 
resource control mechanism for making ready and releasing resources in the 
respective resource module, the resources comprising electronic memory units. 

The above-mentioned objects are achieved through the present 

10 invention in particular in that a first resource management instruction 
comprising a module identification, i.e. a first request for making ready or 
releasing hardware resources, e.g. storage space, or software resources, e.g. 
software applications, is transmitted to a resource management centre, in that a 
second resource management instruction is transmitted from the resource 

15 management centre via a communication network to the resource module 
identified through the module identification, in that resources are made ready or 
released through a resource control mechanism in the identified resource 
module according to the received second resource management Instruction, in 
that a resource management confirmation is transmitted from the identified 

20 resource module via the communication network to the resource management 
centre, and in that information about the resources made ready or released is 
stored, assigned to the module identification, in the resource management 
centre. The advantage of sending requests for making ready or releasing 
resources of a portable resource module via a resource management centre 

25 and of storing there information for the respective resource module about the 
resources made ready or released is that the resources of all participating 
resource modules or at least defined portions of these resources can be 
managed in a centralised way. That means that in the resource management 
centre it can be determined which memory areas of a particular resource 

30 module have already been made ready, i.e. occupied or reserved, or are still 
free, and which software applications have been made ready, I.e. loaded. A 
centralised distribution and updating of software applications in the portable 
resource modules is thereby made possible without already available 
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applications having to be loaded another time and without unnecessary loading 
attempts having to be made via the communication network if the storage 
space necessary therefor is not free. The centralized management of 
resources of resource modules makes it possible furthermore to make available 
5 to a third party resources for use by this third party. For example, a defined 
memory area can be reserved for software applications of an interested third 
party. 

In an embodiment variant, the module identification and an 
application request are transmitted by the user of the communication terminal 

10 to an application management unit, the first resource management instruction is 
transmitted based on the received application request by the application 
management unit to the resource management centre, the first resource 
management instruction comprising a resource user identification, and the 
resource user identification being stored, assigned to the module identification, 

15 in the resource management centre. The advantage of sending the application 
request and the module identification via an application management unit to the 
resource management centre is that the user is able to request different 
software applications from a plurality of independent vendors, who each 
operate an application management unit, these vendors being able to avail of 

20 the centralised services of the joint resource management centre, where they 
are registered as resource users. 

In an embodiment variant, a resource preparation confirmation is 
transmitted from the resource management centre to the application 
management unit, an application installation request is transmitted from the 

25 application management unit via the communication network to the particular 
resource module, an application is installed in the particular resource module 
through the resource control mechanism in accordance with the application 
installation request using the resources made ready, and information about the 
Installed application is stored in the application management unit, the 

30 information being stored assigned to the module identification. The advantage 
of this embodiment variant is that the operator of the application management 
unit, typically the vendor of the software applications, has complete control over 
the software applications offered by him and over the installation of these 
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software applications, and nevertlieless tlie centralised services of the resource 
management centre can be availed of. 

In an embodiment variant, in the resource management centre, an 
application installation request Is inserted into the second resource 

5 management instruction, an application is installed in the particular resource 
module through the resource control mechanism in accordance with the 
application installation request, and information about the installed application 
is stored In the resource management centre, the information being stored 
assigned to the module Identification. The advantage of this embodiment 

10 variant Is that the Implementation of the application management unit is 
simplified since the delivery of the requested software application to the 
resource module is also carried out by the resource management centre. 

In an embodiment variant, the communication address of the 
communication terminal is determined from a data store in which module 

15 identifications and communication addresses assigned to these module 
identifications are stored. The advantage of mapping module identifications in 
communication addresses, e.g. call numbers, is that the resource management 
centre and the application management unit only need to have the module 
identification of the resource module indicated to them, and the current 

20 communication address of the communication terminal with which the resource 
module is connected at the time can be determined, preferably in an address 
mapping unit in the communication network. 

Brief Description of the Drawings 

An embodiment of the present Invention is described in the following 
25 with reference to an example. The example of the embodiment is illustrated by 
the following attached figures: 

Figure 1 shows a block diagram of a system for management of 
resources of portable resource modules in which schematically represented are 
different communication terminals with resource modules connected via a 
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communication networl< to a resource management centre and an application 
management unit. 

Figure 2 shows a time diagram representing the procedural 
sequence at the resource management, the exchange of data between an 
5 application management unit, or respectively a communication terminal, the 
resource management centre and a resource module being shown for the case 
where the application management unit does not participate in the delivery of 
the requested software applications- 
Figure 3 shows a time diagram representing the procedural 
10 sequence at the resource management, the exchange of data between an 
application management unit, the resource management centre and a resource 
module being shown for the case where the application management unit is 
responsible for delivery of the requested software applications. 

Modes for Carrying Out the Invention 

15 In Figures 1, 2 and 3, same components corresponding to one 

another are designated by the same reference numerals. In Figure 1, the 
reference numerals 1 and 1' refer to portable resource modules corresponding 
to one another, only the resource module designated by the reference numeral 
1 being shown in detail, however. The resource module 1 comprises an 

20 electronic memory 1 1 with a plurality of memory units for storage of data and 
software programs 111, 112, 113 as well as at least one processor 12 
connected to the electronic memory 11. 

In Figure 1, the reference numeral 3 refers to a communication 
network comprising a mobile radio network and/or a fixed network. The mobile 
25 radio network is, for example, a GSM (Global System for Mobile 
Communication) or a UMTS network (Universal Mobile Telephone System) or 
another, for instance satellite-based, mobile radio network. The fixed network 
is e.g. the public switched telephone network or an ISDN network (Integrated 
Services Digital Network). 
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The reference numerals 2, 2\ 2" in Figure 1 designate different 
communication terminals connectible to the communication network 3, with 
which terminals the resource modules 1, 1' are removably connected. The 
communication terminal 2 is a mobile radio telephone. The communication 
5 terminal 2' is a laptop or a PDA computer (Personal Digital Assistant) with a 
communications module for the communication via a mobile radio network. 
The communication terminal 2", for Instance a PC (Personal Computer), 
comprises a communications module for communication via a fixed network. 

The resource module 1 comprises a resource control mechanism 
10 111 for making ready and releasing resources of the resource module 1 . The 
resource control mechanism 111 is preferably designed as programmed 
software module, and receives resource management instructions via the 
communication terminal 2, with which it is connected. Resource management 
instructions comprise instructions for making ready and releasing hardware and 
15 software resources such as memory space reservation, memory space release, 
application installation or application removal. The resource control mechanism 
111 also comprises in particular programmed software functions for installing 
an application in the resource module 1 In accordance with an application 
installation request received with a resource management instruction. The 
20 resource control mechanism 111 keeps a memory area table in which memory 
areas made ready of the electronic memory 11 are reserved or installed 
software applications are assigned. The resource control mechanism 111 
prevents software applications from accessing data of other software 
applications in an unauthorised way. 

25 The resource module 1 comprises a confirmation module 112 for 

transmitting via the communication network 3 to the unit from which a resource 
management instruction was received a resource management confirmation 
relating to resources which have been made ready or released through the 
resource control mechanism 111 in accordance with a received resource 

30 management instruction. The confirmation module 112 is preferably designed 
as a programmed software module and carries out the data communication via 
the communication network 3 with the aid of the communication functions of the 
connected communication terminal 2. 
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The resource module 1 comprises moreover software resources 113 
(application) whicli have already been stored during manufacture of the 
resource module 1 or are stored at a later point in time in the electronic memory 
1 1 of the resource module 1 . 

5 The reference numeral 4 in Figure 1 refers to a resource 

management centre comprising one or more computers connected to the 
communication network 3. For the connection and the data exchange with and 
over the communication network 3, the resource management centre 4 
comprises a communications module 42 with the hardware and software 

10 components necessary therefor. 

The resource management centre 4 comprises a receiving module 
43 for receiving resource management instructions. The resource 
management instructions contain a module identification, identifying a particular 
resource module or a particular group of resource modules 1, 1\ to which the 

15 respective resource management instruction relates, and data about the 
resources which are supposed to be made ready or released, for instance a 
memory area, an application identification and/or a software application. 
Depending upon the embodiment variant, the resource management 
instructions can be received from a user or from an application management 

20 unit 5 via the communication network 3. As indicated in the figure by means of 
the broken lines, a direct connection can also exist between the resource 
management centre 4 and the application management unit 5 (the resource 
management centre 4 and an application management unit 5 can be 
Implemented on a common computer, for Instance). The receiving module 43 

25 is preferably implemented as a programmed software module. 

The resource management centre 4 comprises a management 
instruction module 44 for transmitting a resource management Instruction over 
the communication network 3 to a particular resource module or a particular 
group of resource modules 1,1'. The resource management instruction Is 
30 drawn up by the management instruction module 44 based on the resource 
management instruction received in the receiving module 43, and is transmitted 
to the resource module(s) 1, r identified through the module identification. The 



9 



drawn up resource management instruction contains data about the resources 
which are supposed to be made ready or released, for instance a memory area. 
Depending upon the embodiment variant, the management instruction module 
44 can also insert an application installation request into the resource 

5 management instruction comprising an application identification and/or a 
software application. Before a resource management instruction is transmitted 
to a resource module by the management instruction module 44, the 
management instruction module 44 checks in the data store 41 , described in 
the following, whether the respective resource module 1 has available sufficient 

10 free resources. The management instruction module 44 is preferably 
implemented as a programmed software module. 

The resource management centre 4 further comprises a 
management module 45 and a data store 41 for storing information about the 
resources made ready or released, the information being stored in each case 

15 assigned to the module identification of the respective resource module 1 . The 
data store 41 , which is implemented in each case as database on a separate or 
a common computer, contains data, also assigned in each case to a module 
identification, about available software and hardware resources, installed in a 
standard way, of the resource module 1, or a module type from which these 

20 data can be derived by means of module profiles. Data about hardware 
resources comprise information about memory size, available interfaces and 
processors. Data about software resources comprise information about 
available cryptographic keys, cryptographic functions and other software 
programs. If the original resource management instruction has been received 

25 from an application management unit 5, the information mentioned above are 
stored in the data store 41, also in a way assigned to a resource user 
identification identifying the application management unit 5. The management 
module 45 is preferably implemented as a programmed software module. 

Finally, the resource management centre 4 also comprises a 
30 confirmation module 46 for transmission of a resource preparation confirmation 
to the application management unit 5 from which the resource management 
instruction has been received, if applicable. The confirmation module 46 is 
preferably implemented as a programmed software module. 
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The application management unit 5 comprises a communications 
module 52 with the necessary hardware and software components for data 
exchange over the communication network 3. Application requests from an 
interested user of the communication terminal 2 are received via the 
5 communications module 52 and are accepted in the application management 
unit 5 through corresponding programmed software functions. Also received 
from the user, in addition to the application request comprising an application 
identification, is the module identification of the resource module 1 in which the 
software application is supposed to be installed. 

10 As is shown schematically in Figure 1 , application requests can also 

be transmitted from the user to the application management unit 5 via one of a 
plurality of application vendor units 6. The application vendor units 6 each 
comprise at least one computer, a communications module 62 with the 
necessary hardware and software components for the data exchange over the 

15 communication network 3, a data store 61 in which module identifications and 
application identifications assigned to these module identifications are stored, 
and a software module 63 for receiving application requests, for forwarding 
application requests to a responsible application management unit 5 and for 
storing the mentioned information in the data store 61. The hierarchical 

20 organisation of application management units 5 and application vendor units 6 
makes possible the flexible division of resource responsibilities and resource 
distribution among different operators of these units. The data exchange 
between the application management units 5 and the application vendor units 6 
takes place over the communication network 3 or, as indicated by the broken 

25 lines in Figure 1 . via a direct connection (an application management unit 5 and 
an application vendor unit 6 can be implemented on a common computer, for 
instance). 

The application management unit 5 comprises programmed software 
functions for transmitting a resource management instruction to the resource 
30 management centre 4 based on a received application request. The respective 
module identification and a resource user identification identifying the 
application management unit 5 are thereby inserted into the resource 
management instruction. For the case where the application installation 
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request is transmitted by the resource management centre 4 over tlie 
communication network 3 to the respective resource module 1 . an application 
identification is additionally inserted into the resource management instruction. 

For the case where the application installation request is transmitted 
5 directly by the application management unit 5 over the communication network 
3 to the respective resource module 1, the application management unit 5 
comprises in addition an application instruction module 54 as well as an 
application management module 55 for storing information about the installed 
application, this information being stored assigned to the module identification 
10 of the respective resource module 1. 

The reference numeral 31 in Figure 1 refers to an address mapping 
unit, preferably a programmed software function, which, on the basis of a 
module identification, determines the communication address assigned to the 
communication terminal 2 to which the resource module 1 identified through the 

15 module identification is connected. The address mapping unit 31 has access to 
an address register in which communication addresses are assigned to module 
identifications. The address register is, for example, an HLR (Home Location 
Register) in which so-called I MS Is (International Mobile Subscriber 
Identification) are assigned to so-called MSISDN numbers (Mobile Subscriber 

20 ISDN), i.e. call numbers. Besides the IMSIs, other data elements can also be 
used as module identifications, for instance card numbers or chip numbers. 

One skilled in the art understands that the mentioned software 
modules can also be implemented entirely or partially as hardware. 

In the following paragraphs, the operational sequence at the 
25 resource management will be described, with reference to Figure 2, for the 
case where a software application is requested and is delivered to the resource 
module 1 by the resource management unit 4. 

In step S20. a resource management instruction is transmitted to the 
resource management unit 4 by the user, by means of his communication 
30 temriinal 2, or by the application management unit 5. In the latter case, the 
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resource management instruction is transmitted by the application management 
unit 5 based on an application request (not shown) received from the user. The 
resource management instruction contains the application identification for the 
desired software application, the module identification of the resource module 1 
5 in which the software application is supposed to be loaded, and, if applicable, 
the resource user identification which is assigned to the application 
management unit 5. 

In step S21, the received resource management instruction is 
handled in the resource management unit 4. Based on the received module 

10 identification and the application identification, the resource requirements for 
the desired software application are determined (e.g. memory space and 
software functions used), through consultation of the data store 41, and are 
compared with the resources available in the resource module 1 . If sufficient 
resources are not available, a negative communication is transmitted to the 

15 application management unit 5 or respectively to the communication terminal 2. 
OthenA^ise a resource management instruction is prepared into which an 
application installation request with the desired software application (and, if 
applicable, with additional necessary software resources) is inserted. 
Installation-specific data such as start address and memory size can also be 

20 inserted into the prepared resource management instruction. In addition, the 
application identification, the module identification and. if applicable, the 
resource user identification and the Installation-specific data are stored in the 
data store 41 assigned to one another. 

In step S22, the prepared resource management instruction is 
25 transmitted by the resource management centre 4 via the communication 
networl< 3 to the resource module 1 . The communication address assigned to 
the module identification, i.e. the call number of the communication terminal 2. 
is thereby determined by the address mapping unit 31 . 

In step S23, via the communication terminal 2. the resource 
30 management instruction is received and handled In the resource module 1. 
The resource control mechanism 111 reserves the necessary memory 
requirements and installs the software application. If the Installation-specific 
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data have not been specified already by the resource management centre 4, 
they are determined by the resource control mechanism 111. Then a resource 
management confinmation, which comprises, if applicable, installation-specific 
data, is prepared in the resource module 1. 

5 In step S24. the resource management confirmation is transmitted 

from the resource module 1 via the communication terminal 2 and the 
communication network 3 to the resource management centre 4. 

In step S25, based on the received resource management 
confirmation, the resource management centre 4 marks the software 
10 application in the data store 41 as installed and the required resources as 
reserved for the resource module 1. 

In step S26, the resource management centre 4 transmits a 
confirmation to the application management unit 5 or respectively to the 
communication terminal 2. 

15 If, in step S20, a resource management instruction is transmitted to 

the resource management unit 4 relating to the release of resources in the 
resource module 1, a corresponding resource management instruction is 
prepared in step S21 into which a resource release request is inserted, and is 
transmitted to the resource module 1 In step S22. In step S23, the resource 

20 control mechanism 111 releases the resources in accordance with the received 
resource release request. In step S25, based on a received resource 
management confirmation, the resource management centre 4 marks the 
respective resources in the data store 41 as released for the resource module 
1. 

25 In the following paragraphs, with reference to Figure 3, the 

operational sequence at the resource management will be described for the 
case where the requested software application is delivered to the resource 
module by the application management unit. 
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In step S30, a resource management instruction is transmitted by the 
application management unit 5 to the resource management unit 4. The 
resource management instruction Is transmitted by the application management 
unit 5 on the basis of an application request (not shown) received from the 

5 user. The resource management instruction contains data on the required 
resources to be made ready for the desired software application, for instance 
the needed memory requirements, the module identification of the resource 
module 1 in which the resources are supposed to be made ready, and the 
resource user identification which is assigned to the application management 

10 unit 5. 

In step S31, the received resource management instruction is 
handled in the resource management unit 4. Based on the received module 
identification the data on the resources to be made ready are compared in the 
data store 41 with the resources available in the resource module 1. If 

15 sufficient resources are not available, a negative communication is transmitted 
to the application management unit 5. Otherwise a resource management 
instruction is prepared into which the data on the resources to be made ready is 
inserted. Further resource-specific data can be additionally inserted into the 
prepared resource management instruction such as start addresses or defined 

20 memory areas. In addition, the module identification, the resource user 
identification and the data on the resources to be made ready are stored in the 
data store 41 assigned to one another 

In step S32, the prepared resource management instruction is 
transmitted by the resource management centre 4 via the communication 
25 network 3 to the resource module 1. The communication address, i.e. the call 
number of the communication terminal 2, assigned to the module identification, 
is determined by the address mapping unit 31. 

In step S33, via the communication terminal 2, the resource 
management instruction Is received and handled in the resource module 1. 
30 The resource control mechanism 111 reserves the requested resources, for 
example the requested memory space. If the resource-specific data have not 
already been specified by the resource management centre 4, they are 
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determined by the resource control mechanism 111. Then a resource 
management confirmation comprising, if applicable, resource-specific data and 
a resource reference, is prepared in the resource module 1 . 

In step S34, the resource management confirmation is transmitted to 
5 the resource management centre 4 from the resource module 1 via the 
communication terminal 2 and the communication network 3. 

In step S35, based on the received resource management 
confirmation, the resource management centre 4 marks in the data store 41 the 
requested resources as reserved for the resource module 1 , and assigns to 
10 them the received resource reference. 

In step S36, the resource management centre 4 transmits a resource 
preparation confirmation with the resource reference to the application 
management unit 5. 

In step S37, based on the received resource preparation 
15 confirmation, an application installation request is prepared with the desired 
software application and the resource reference of the resources made ready. 

In step S38, the prepared application installation request is 
transmitted by the application management unit 5 via the communication 
network 3 and the communication terminal 2 to the resource module 1 . The 
20 communication address, i.e. the call number of the communication terminal 2, 
assigned to the module identification, is determined by the address mapping 
unit 31. 

In step S39, the application installation request is received in the 
resource module 1 via the communication terminal 2 and is handled. The 
25 resource control mechanism 111 installs the software application using the 
reserved resources identified through the resource reference. Then a 
confirmation is prepared in the resource module 1 . 
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In step S40, the confirmation is transmitted from tlie resource 
module 1 via the communication terminal 2 and the communication network 3 
to the application management unit 5. 

In step S41, based on the received confimnation. the application 
5 management unit 5 stores in the data store 51 the application identification of 
the installed software application in a way assigned to the module identification 
of the resource module 1, and marks the software application as installed. 

Finally, it should be stated that the exchange of instructions and data 
between the resource management centre 4 and a resource module 1, 

10 between the application management unit 5 and a resource module 1, between 
the resource management centre 4 and the application management unit 5 as 
well as between the application management unit 5 and the application vendor 
unit 6 preferably takes place using cryptographic security mechanisms. In 
particular, digital certificates employing key pairs of the PKI (Public Key 

15 Infrastructure) can be used for the identification and authentication. 

Industrial Applicability 

The present invention makes possible centralized management of 
use of resources by a multiplicity of resource modules connected to 
communication terminals. 
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